Skip to main content
jomof
New Member
May 26, 2024
Solved

Configuring new deliciated HA heartbeat for Redundancy.

  • May 26, 2024
  • 1 reply
  • 3694 views

 

Hello Expert,

 

I have two 400E in a HA cluster .

We use the default HA ports for Heartbeat interface but had to add redundancy using the lan port.(BR_DATA port8After reviewing numerous documentation we found that this was not best practice since the lan port is heavy use for data.

I would like to assigned a new deliciated port (24)  to be my  backup heartbeat and remove (BR_DATA (port8) but would need some guidance since this is a production environment. 

 

Also to configure port 24 as heartbeat port are there any special configuration need prior to it being assigned .

 

GuyOffice-1 (ha) # show
config system ha
set group-name "trans_amt"
set mode a-p
set password g==????Swdee
set hbdev "ha" 200 "port8" 100
set session-pickup enable
set override disable
set priority 200
set monitor "port8"
end

 

Thank you

 

Best answer by ozkanaltas

Hi @jomof ,

 

If you don't make any changes to the Ha port on the same time, there will be no interruption. Because FortiGate will still continue communicating on the HA port.

1 reply

ozkanaltas
Valued Contributor III
May 26, 2024

Hello @jomof ,

 

A dedicated interface is always suggested for the HA heartbeat interface.

 

When I reviewed your configuration you have also one more heartbeat interface (HA). Because of that you can remove port8 from the configuration and add Port24.

 

No need to do a special configuration for that. You just need to make sure that the new cable is connected to the same port to both devices and is up.

jomof
jomofAuthor
New Member
May 29, 2024

 

Hello @ozkanaltas,
Sorry for the tardy response but this looks okay one more thing since this is production environment will i have any downtime?
Thanks 
 
Regards
PREVIEW
 
 
 

 

S

ozkanaltas
Valued Contributor III
May 29, 2024

Hi @jomof ,

 

If you don't make any changes to the Ha port on the same time, there will be no interruption. Because FortiGate will still continue communicating on the HA port.